CVE-2026-82679

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

CVE-2026-82679

An unrestricted file upload vulnerability exists in diem-project/diem (up to version 5.1.3 ), located in the Widget Editor component within the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php. The root cause is an unknown function that fails to properly restrict upload hand...

CVE-2026-82679 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

EUVD-2019-19079

Malware in sbrugna...

Exploit for Unrestricted Upload of File with Dangerous Type in Najeebmedia Frontend_File_Manager

CVE-2016-15042 – WordPress Frontend File Manager & N‑Media Pos...

Joomla! 3.0.x < 3.9.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Lack of ACL checks in sample data plugins affects Joomla 3.8.0 through 3.9.3 - XSS in comconfig JSON handler affects Joomla 3.2.0 through 3.9.3 - XSS in itemtitle layout...

Joomla! cross-site scripting vulnerability (CNVD-2019-15989)

Joomla! is a globally recognized content management system developed using PHP language and MySQL database, which can be implemented on various platforms such as Linux, Windows, MacOSX and so on. A cross-site scripting vulnerability exists in the media form field in versions of Joomla! prior to...

Cross site scripting

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...

CVE-2019-9714

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...

CVE-2019-9714

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...

PT-2019-19817

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.4 Description An issue was discovered in the media form field, which lacks escaping, leading to a cross-site scripting XSS issue. Recommendations For versions prior to 3.9.4, update to version 3.9.4 or later to...

CVE-2019-9714: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...